Notes tagged health-gate — ymrtech.com

An untested rollback does not fail loudly: a denied sudo reads as empty output, the script finds no previous generation, and the host stays broken.